Investment Scam Report: Phishing Emails Sent via Salesforce-Linked Servers, BBB Complaint Says

An investment scam report filed with the Better Business Bureau (BBB) Scam Tracker raises a question many email users ask: how do unsolicited investment pitches keep reaching inboxes, and who is behind them? The June 2025 complaint describes a run of investment-themed phishing emails that the reporter says came from servers linked to Salesforce.com. This FintechLegals report explains what was reported, what remains unverified, and how to spot and report a similar online investment scam.

What Happened in This Investment Scam Report?

A person in Indiana submitted the complaint (Scam ID 999669) to BBB Scam Tracker on June 13, 2025. The reporter classified it as phishing and said it was one of many investment-themed phishing messages from different companies.

According to the reporter:

• The message came from the sender address invest@with.theretirementresearch.com.
• The sender’s IP address was 128.245.243.246.
• IP addresses beginning with “128.245” belong to Salesforce.com, a claim the reporter makes but BBB has not confirmed.
• It was the second such email that day and the eighth in three days.
• No phone number was provided, and the scammer listed the location as San Francisco, CA.

The report lists the business name as “Salesforce.com Inc. Imposter.” The report does not describe any financial loss, and the reporter does not say they responded to the message or sent money. The complaint is a warning about repeated unsolicited messages, not an account of a completed theft.

How Did the Reported Investment Scheme Work?

The report does not describe an investment product, a promised return or a website. It does not say how the sender obtained the reporter’s address. That limits what can be said about the scheme itself.

What the report describes is the first stage of many online investment scams: mass unsolicited email promoting investment or retirement “research.” Scammers often use these messages to collect personal information, steer recipients to a fake investment platform or start a conversation that leads to a payment request. Whether that happened here is unknown.

What Company or Platform Was Mentioned?

Two names appear, and they should be kept apart.

Salesforce.com is a real, widely used customer-relationship and email-marketing software company. The reporter says the sending IP address belongs to its network. Marketing platforms can be misused by people who sign up as customers, so an email passing through a legitimate company’s servers does not show that the company sent it or knew about it. BBB labels the entry an “imposter” report, which suggests the reporter does not believe Salesforce authored the messages.

theretirementresearch.com appears in the sender address. FintechLegals has not independently verified who owns or operates this domain, and a complaint alone does not establish that the sender broke the law. Readers can look up domain registration details, creation dates and hosting information themselves, and a domain ownership investigation can help establish who actually controls a domain tied to a suspected scam. Treat the name as an unverified claim until regulatory records say otherwise.

What Are the Warning Signs of Similar Investment Scams?

Several investment scam warning signs apply to the reported emails:

1. Unsolicited contact. Legitimate firms rarely cold-email investment offers.
2. Repeated messages from varying senders. The reporter noted a pattern of near-daily emails from different company names.
3. Vague sender identity. No phone number was listed, and the sender’s business identity was unclear.
4. Mismatched branding. An unfamiliar domain paired with a well-known platform’s infrastructure can create false credibility.

Other common signals of investment fraud include guaranteed returns, pressure to act quickly, requests for payment in cryptocurrency or gift cards, and refusal to provide license or registration details.

How Can Investors Protect Themselves?

• Don’t click links or open attachments in unsolicited investment emails.
• Verify registration. Look up advisers on the SEC’s Investment Adviser Public Disclosure site and brokers on FINRA BrokerCheck. Your state securities regulator can also confirm licensing.
• Contact firms independently using details from official sources, not from the email.
• Check domains. Look closely at spelling, and be wary of newly created or unfamiliar sites.
• Never share passwords, Social Security numbers or account details in response to an email.
• Use spam filtering and mark suspicious messages as phishing.
• Run due diligence before you engage. Check a firm’s registration, history and warnings from regulators, or use a professional due diligence service for background checks on unfamiliar companies or projects.

Where Can Victims Report Investment Fraud?

If you want to report an investment scam, these are the main options in the United States:

• BBB Scam Tracker (bbb.org/scamtracker) to warn others.
• Federal Trade Commission at ReportFraud.ftc.gov.
• FBI Internet Crime Complaint Center (IC3) at ic3.gov, especially if money was sent.
• U.S. Securities and Exchange Commission, through its online tips portal.
• FINRA, for suspected misconduct involving brokers or firms.
• Your state securities regulator.

Victims who sent money, especially in cryptocurrency, should keep all evidence: screenshots, wallet addresses, transaction IDs and messages. Firms such as FintechLegals offer fraud investigation and crypto asset tracing services that can turn this evidence into a report for attorneys, law enforcement or financial institutions. No service can guarantee that lost funds will be recovered, and anyone who promises this should be treated with suspicion.

If you lost money, contact your bank or card issuer immediately.

Conclusion

The BBB report is a consumer’s account of repeated investment-themed phishing emails, not a regulatory finding. It reports no financial loss and does not prove wrongdoing by any named party. It does illustrate a familiar pattern: unsolicited messages, unclear senders and borrowed credibility. Verify any investment professional before engaging, treat unexpected offers with skepticism, and report suspicious messages so others can avoid them.

Verify any investment professional before engaging, treat unexpected offers with skepticism, and report suspicious messages so others can avoid them. For more investigations like this one, see FintechLegals’ fintech blog.

Source: Better Business Bureau (BBB) Scam Tracker, Scam ID 999669:https://www.bbb.org/scamtracker/lookupscam/999669

For more updates, follow us on LinkedIn.